NSO Group must pay WhatsApp over $167M in damages for attacks on its users
NSO Group must pay WhatsApp over $167M in damages for attacks on its users Pierluigi Paganini May 07, 2025 NSO Group must pay WhatsApp over…
Category: Securityaffairs
U.S. CISA adds FreeType flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds FreeType flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 07, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds FreeType flaw to…
Samsung MagicINFO flaw exploited days after PoC publication
Samsung MagicINFO flaw exploited days after PoC exploit publication Pierluigi Paganini May 06, 2025 Threat actors started exploiting a vulnerability in Samsung MagicINFO only days…
U.S. CISA adds Langflow flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Langflow flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 06, 2025 U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Langflow…
Google fixed actively exploited Android flaw CVE-2025-27363
Google fixed actively exploited Android flaw CVE-2025-27363 Pierluigi Paganini May 06, 2025 Google addressed 46 Android security vulnerabilities, including one issue that has been exploited…
New ‘Bring Your Own Installer (BYOI)’ technique allows to bypass EDR
New ‘Bring Your Own Installer (BYOI)’ technique allows to bypass EDR Pierluigi Paganini May 06, 2025 A new BYOI technique lets attackers bypass SentinelOne EDR,…
Smishing on a Massive Scale: ‘Panda Shop’ Chinese Carding Syndicate
Smishing on a Massive Scale: ‘Panda Shop’ Chinese Carding Syndicate Pierluigi Paganini May 06, 2025 Resecurity found a new smishing kit called ‘Panda Shop,’ mimicking…
Kelly Benefits December data breach impacted over 400,000 individuals
Kelly Benefits December data breach impacted over 400,000 individuals Pierluigi Paganini May 05, 2025 Kelly Benefits has determined that the impact of the recently disclosed…
A hacker stole data from TeleMessage, the firm that sells modified versions of Signal to the U.S. gov
A hacker stole data from TeleMessage, the firm that sells modified versions of Signal to the U.S. gov Pierluigi Paganini May 05, 2025 A hacker stole…
Experts shared up-to-date C2 domains and other artifacts related to recent MintsLoader attacks
Experts shared up-to-date C2 domains and other artifacts related to recent MintsLoader attacks Pierluigi Paganini May 05, 2025 MintsLoader is a malware loader delivering the…
Sansec uncovered a supply chain attack via 21 backdoored Magento extensions
Sansec uncovered a supply chain attack via 21 backdoored Magento extensions Pierluigi Paganini May 05, 2025 Supply chain attack via 21 backdoored Magento extensions hit…
US authorities have indicted Black Kingdom ransomware admin
US authorities have indicted Black Kingdom ransomware admin Pierluigi Paganini May 05, 2025 A 36-year-old Yemeni man behind Black Kingdom ransomware is indicted in the…